Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/mZMIev6VHWJbfkmY7xInir_cl50.roa
File: mZMIev6VHWJbfkmY7xInir_cl50.roa (raw, json)
Hash identifier: I4Q4tKDnqnSiYql+mRAMTbFpVyDDDU2eOUBgb8YYIss=
Subject key identifier: 99:93:08:7A:FE:95:1D:62:5B:7E:49:98:EF:12:27:8A:BF:DC:97:9D
Certificate issuer: /CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Certificate serial: 01856D0AD522D47B869AF5CC7324F36F5CCF
Authority key identifier: BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/mZMIev6VHWJbfkmY7xInir_cl50.roa
Signing time: Sun 01 Jan 2023 11:15:04 +0000
ROA not before: Sun 01 Jan 2023 11:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56648
IP address blocks: 2a13:2900::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 29 Sep 2023 13:54:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:d5:22:d4:7b:86:9a:f5:cc:73:24:f3:6f:5c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Validity
Not Before: Jan 1 11:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9993087afe951d625b7e4998ef12278abfdc979d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:21:ae:7c:fb:e9:63:d2:92:59:b3:ce:97:69:
08:c6:80:5d:ef:f9:28:f1:4a:6d:b4:68:5a:c6:90:
2e:89:be:f4:0c:b4:33:c0:f3:65:75:af:b1:9e:ac:
5d:15:e9:72:29:da:d9:a0:82:6c:eb:b2:6c:b6:0a:
fc:99:45:d0:1b:d4:9c:d8:8f:dc:03:54:9f:9d:1c:
cd:2d:44:43:05:50:12:b0:04:02:6f:14:33:76:cc:
e3:73:61:94:2c:ed:0c:f9:a6:61:8b:04:eb:ab:a2:
9e:12:fe:6d:f8:e7:87:13:9b:4e:96:45:13:d4:0c:
88:c9:d9:f6:fa:40:15:d5:d0:86:38:83:cf:cf:ca:
b7:8e:63:d5:08:e3:64:10:b0:a6:17:c9:ca:bc:f6:
39:5f:ca:9e:0b:e5:34:ea:80:f4:56:2f:27:14:fc:
a3:75:13:07:2e:65:d2:fa:98:de:3d:04:30:24:14:
75:b1:e9:22:f2:54:92:cb:94:e7:d1:2c:58:3f:82:
4d:23:fd:ca:4c:ab:30:c9:1b:f1:9a:e0:bd:03:88:
51:e7:ec:87:51:2f:3d:1d:3c:38:39:3c:24:aa:eb:
26:2f:ba:f9:c0:56:f8:43:be:94:8a:14:b2:5c:ab:
b0:d5:3c:15:26:29:10:5e:7a:d4:f6:fe:bb:58:08:
16:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:93:08:7A:FE:95:1D:62:5B:7E:49:98:EF:12:27:8A:BF:DC:97:9D
X509v3 Authority Key Identifier:
keyid:BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/mZMIev6VHWJbfkmY7xInir_cl50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:2900::/29
Signature Algorithm: sha256WithRSAEncryption
94:0b:f9:16:9d:e8:4f:56:76:d6:4d:17:c4:30:a9:4b:e5:99:
24:3c:ec:15:b4:8b:e2:56:a5:e7:88:be:ab:16:9b:de:0a:ee:
3f:77:b1:2d:9e:26:fd:79:d5:9d:00:dc:44:bc:62:10:57:ae:
96:d8:46:db:7e:01:02:4a:0e:12:0d:03:69:a6:85:c2:d5:69:
9c:fd:a4:95:20:ae:80:ef:7e:8f:95:75:9a:da:0b:cd:b3:a2:
96:82:6f:bf:1e:3d:81:27:8c:c9:df:e3:36:aa:09:7d:cb:52:
58:0c:7e:fd:e7:c4:19:2c:1d:9d:ab:f0:b4:72:95:40:cf:5d:
2d:50:29:6e:99:ad:cb:17:88:73:23:ea:06:f2:4f:a6:21:d1:
48:a4:ed:bb:61:b9:ec:08:5d:be:ba:9d:85:ed:49:43:5f:7a:
4d:e1:02:b3:51:27:c8:e3:09:25:58:e8:55:6f:43:fb:e2:c8:
b9:99:eb:03:4c:4b:d0:77:21:13:cc:5b:b4:8f:2f:60:ef:e8:
b6:de:8c:3d:c8:7c:7c:9d:91:5c:21:8c:20:34:76:04:89:4f:
96:b4:f9:11:2a:2c:39:4a:f6:00:5f:75:61:20:b4:d3:46:54:
35:a9:d6:34:c6:5c:97:5d:25:ff:b4:de:69:cd:f9:ac:21:b8:
51:2e:2c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:39 2024 by rpki-client on console-fra.rpki-client.org